$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: 0J9PeCnhMwVGZlrQRoSduXhDpQLODJHcjO7DrxG6fy0= Subject key identifier: B4:FE:2A:73:A8:17:A5:43:42:34:8E:1F:AD:37:30:44:46:5A:A6:AE Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 05F2 Signing time: Fri 30 May 2025 23:08:19 +0000 Manifest this update: Fri 30 May 2025 23:08:19 +0000 Manifest next update: Fri 06 Jun 2025 23:08:19 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: DtdAvwpUlGHrVMpdNhJ1bwOqi2/ir0F3Eh4RTWwctYQ=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 2zuRRC9X9QGiy5zsxYozQv/RNV6iHA3e11RJdVWl2NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: May 30 23:08:19 2025 GMT Not After : Jun 6 23:08:19 2025 GMT Subject: CN=683a3a63-fe66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:0c:1f:b6:43:a0:7a:ef:dd:f1:bc:95:ba: 06:27:5a:a7:5a:ab:f6:db:64:ad:72:12:ef:59:eb: 4e:78:e2:a1:ef:04:67:e0:c4:5e:9d:3a:26:e3:57: b3:42:e3:15:ec:7a:2d:5f:36:6d:33:e5:1f:1b:a0: f2:ac:42:ed:86:fc:9e:b5:37:ff:bc:59:62:1e:61: 21:ce:b0:9c:f6:2c:ba:52:da:a3:e8:3d:47:87:49: 79:2f:5d:df:72:85:15:9d:71:54:8a:48:c5:d2:a6: 0c:7b:23:1d:2f:a7:cd:99:66:1d:1e:92:7a:92:76: db:60:4f:ad:05:e0:3b:2e:66:13:c3:09:bd:10:7e: 62:82:bb:c4:3e:7b:7d:2d:b8:b5:77:0f:e4:54:d3: b9:9a:09:f4:ad:e4:76:54:04:c5:8b:56:e6:7c:b8: 08:69:5c:b8:db:88:cc:8f:8b:9b:8f:c5:32:3f:14: 91:9a:ee:35:f0:8f:6b:12:bb:85:7e:b8:1e:40:5c: 1c:ee:4d:83:ba:e5:46:f0:1f:c6:67:8d:aa:21:6a: 3f:da:82:8b:db:3b:39:50:d2:c3:3a:b2:04:30:4e: 1f:42:80:cf:55:7f:0d:06:e8:c9:cb:98:03:f7:5e: b2:e2:10:33:b3:8a:d0:c7:f4:1a:2f:27:e0:6e:44: 63:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FE:2A:73:A8:17:A5:43:42:34:8E:1F:AD:37:30:44:46:5A:A6:AE X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:07:9b:e6:0c:ce:29:35:c6:32:ae:a2:f6:b5:71:00:e6:6a: 9c:9e:6d:27:ac:57:9b:fa:4d:e3:eb:6f:8b:31:2f:8a:73:c7: 05:bb:5d:7a:be:94:84:2f:4e:6c:cb:b0:07:50:63:35:23:8c: 18:3d:84:6a:00:79:76:c3:41:e8:63:9e:29:34:d5:01:09:54: 67:36:44:fe:02:4e:d4:a0:b2:17:00:2a:6c:d9:a4:33:f3:fa: ff:b2:bd:9d:eb:96:f8:d6:b9:58:fc:e3:40:c3:ad:42:16:66: 97:4e:30:a5:64:0d:0d:d4:72:5d:82:7c:fb:2c:1b:9b:6b:e4: a9:11:a6:43:c4:d8:8a:de:8c:9e:c2:e9:69:aa:8b:ca:15:2a: eb:48:06:ae:01:4c:af:09:95:d9:3f:7b:23:f7:eb:cd:19:26: 26:d3:bc:56:dd:d2:e6:27:f6:87:27:5c:dd:60:ac:40:e1:b4: 29:1e:cf:c1:01:39:f5:c0:b7:41:e3:6b:b8:d7:17:0d:fb:8c: 67:fb:d3:7a:0e:e3:ec:58:90:ed:72:00:b9:cb:75:7b:cb:0b: 5f:8a:42:c3:a2:84:41:32:b1:8a:e9:f0:59:96:fb:35:4a:07: 58:29:00:25:d1:9d:2e:f9:d8:6a:4c:50:de:82:8e:7d:0b:f2: f8:2c:38:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjUwNTMwMjMwODE5WhcNMjUwNjA2MjMwODE5WjAYMRYwFAYD VQQDEw02ODNhM2E2My1mZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sAMH7ZDoHrv3fG8lboGJ1qnWqv222StchLvWetOeOKh7wRn4MRenTom41ez QuMV7HotXzZtM+UfG6DyrELthvyetTf/vFliHmEhzrCc9iy6Utqj6D1Hh0l5L13f coUVnXFUikjF0qYMeyMdL6fNmWYdHpJ6knbbYE+tBeA7LmYTwwm9EH5igrvEPnt9 Lbi1dw/kVNO5mgn0reR2VATFi1bmfLgIaVy424jMj4ubj8UyPxSRmu418I9rEruF frgeQFwc7k2DuuVG8B/GZ42qIWo/2oKL2zs5UNLDOrIEME4fQoDPVX8NBujJy5gD 916y4hAzs4rQx/QaLyfgbkRjwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLT+KnOo F6VDQjSOH603MERGWqauMB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgB5vmDM4pNcYyrqL2tXEA5mqcnm0nrFeb+k3j62+LMS+Kc8cFu116 vpSEL05sy7AHUGM1I4wYPYRqAHl2w0HoY54pNNUBCVRnNkT+Ak7UoLIXACps2aQz 8/r/sr2d65b41rlY/ONAw61CFmaXTjClZA0N1HJdgnz7LBuba+SpEaZDxNiK3oye wulpqovKFSrrSAauAUyvCZXZP3sj9+vNGSYm07xW3dLmJ/aHJ1zdYKxA4bQpHs/B ATn1wLdB42u41xcN+4xn+9N6DuPsWJDtcgC5y3V7ywtfikLDooRBMrGK6fBZlvs1 SgdYKQAl0Z0u+dhqTFDego59C/L4LDgW -----END CERTIFICATE-----Generated at Sat May 31 17:04:51 2025 by rpki-client